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ELECTRONIC TENDER SYSTEM 

Background of the Invention: 
Tlie present invention relates to an electronic tender 
5 system, and particularly a method for coding the bidding price 
and a method for deciding the contract price. 

As known from Japanese Patent Laid-Open N0.HEI2- 
118876, for example, such electronic tender system adopts a 
coding technology, because the bidding price information 
10 should be kept secret generally until the tender opening. The 
coded bidding price information is decoded all at once at the 
tender opening, to decide the highest or the lowest bidding 
price among them as the contract price. There, the 
announcement of all bidding prices allows to everyone to 
15 confirm that the contact price has been decided correctly, in 
other words, it was the highest or the lowest price among the 
bidding prices. 

Recently, it is demanded not to publish the bidding price 
not accepted as the contact price, in view of the privacy 
20 protection. To meet this requirement, for example, an 
approach has been disclosed in an article, "Multi-round 
Anonymous Auction Protocols" by Kikuchi, Harkavy and Tyger, 
published in "IEEE Workshop on Dependable and Real-time 
E-CommercB System". This approach disclosed in the prior art 
25 literature is shown in Pig. 1. 

In this approach, the bidder creates a data row 
corr esp ondirLg to liis bidding price and encodes each data 
respectively. The opener receives code string data transmitted 
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by all bidders, integrates and then decodes them to decide the 
contract price. In this approach, as the code string data of 
individual bidder is not decoded, the bidding price of 
respective bidder can be kept secret, and at the same time, the 
identification information of the highest price bidder can be 
extracted, by integrating code string data of all bidders. 

Now, the principle of identification extraction will be 
described. A bidder having an identification information IDi, 
creates a data row corresponding to his bidding price as 
follows. Suppose the tender reception range be (a, b) and his 
bidding price a + v (<b), then (v + 1) times x ID_I are 
enumerated. Next, 0 are enumerated b - (a + v) times. Thus, a 
data row containing (b - a + 1) elements is generated. 

A data row where respective elements of the data row are 
added by each element is output, by integrating data rows 
from all bidders generated in this way. In this data row, 
suppose the element where 0 appears first be t th, the highest 
bidding price (contract price) ia a + t -1, and the bidder who 
has the identification information indicated by the price of the 
t — 1st element- 
However, in this prior art, the bidding data becomes 
longer in proportion to the tender reception price range, 
because the data row is created in proportion to the length of 
the tender reception range, and then it is divided to code- 
Further, when a plurality of bidders have offered the contract 
price, it is impossible to determine the identification or the 
number of concerned bidders, because the decoding result of 
the t — 1st element is the sum of ID information of bidders of 
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the corresponding bidding price. 

Summary of the Invention: 
It is therefore an object of the present invention to 
provide an electronic tender system, allowing to rednce the 
5 bidding data, and at the same time, to identify the concerned 
bidder even when a plurality of bidders have offered the 
contract price, and moreover, to keep secret the bidding 
information o£ other bidding prices than that of the successful 
bidder. 

10 Other objects of the present invention will become clear 

as the description proceeds. 

The electronic tender system according to the present 
invention is characterized by that a code parameter depending 
on the bidding price ia delivered to the coding function section 

15 in its bidder sub-system, and, a contract price candidate 
selection function, and a retrieve function by the decode 
parameter depending on the candidate price are provided, in 
order to decide the contract price in its tender opening sub- 
system. 

20 The introduction of these code parameter and decode 
parameter realizes an effect to judge only if the bidding price 
is identical to the contract price candidate. Therefore, the 
highest or the lowest bidding price and its bidder can be 
decided, by judging if there is a bidding price identical to the 

25 contract price candidate, changing tha contract price 
candidate one by one from the tender possible highest price or 
the lowest pafice, and fnrthe?r, how the other bidders have 
tendered can be concealed. 

3 
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Brief Description of the Drawings: 
Fig. 1 is a block diagram for showing a conventioaal 

method; 

Fig. 2 is a block diagram for showing a composition of 
5 the present invention; and 

Fig. 3 is a block diagram for showing a composition of 
the retrieve means of the present invention. 

Detailed Description of the Preferred Embodiments: 
Referring now to Figs- 2 and 3, description will proceed 
10 to an electronic tender system according to a preferred 
embodiment of the present invention. 

Fig. 2 ia a block diagram showing an embodiment of the 
present invention. The electronic tender system according to 
the present invention comprises a bidder sub-system 100 and a 
IS tender opening snb-aystem 200. The bidder sub-system 100 
includes a code parameter acquisition means lOland a coding 
means 102, while the tender opening sub-system 200 includes 
a reception means 201, a contract price candidate selection 
means 202, a decode parameter acquisition means 203 and a 
20 retrieve means 204. 

The retrieve means 204 includes, as shown in Pig. 3, a 
decoding means 205 and a judgement means 206, and the 
decoding means 205 decodes sequentially coded bidding^ prices 
received by the reception means 201 based on the decode 
26 parameter acquired by the decode parameter acquisition 
means 205, while the judgement means 206 judges that the 
coded bidding price is identical to the contact price candidate 
selected by the selection means 202, in the case when the 

4 
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decoding result by tke decoding means 205 becomes a fixed 
value. 

Note that, in. this embodiment, to simplify the 
description, it is supposed, hereinafter, that a bidder sub- 
S system that has offered the highest price, among bid prices, 
will be decided as the successful bidder, though it is similar in 
the case where the lowest price will be the contract price. 

The input to the bidder sub-system 100, is the bidding 
price deaired by this the bidder sub-system. The bidding price 

10 bid in this bidder sub-system 100 is delivered to the code 
parameter acquisition means 101. In the code parameter 
acquisition means lOl, the code parameter necessary for the 
coding means 102 depending on this bidding price is acquired 
and delivered to the coding means 102, The coding means 102 

15 performs the coding operation based on the supplied code 
parameter, and delivers the coded bidding data to the 
transmission means 103. The transmission means 103, 
transmits the coded bidding^ data to the reception means 201 of 
the tender opening sub-system 200, 

20 The reception means 201 of the tender opening sub- 

system 200, receives the coded bidding data sent from 
respective bidder sub-system 100, directs the contract price 
selection means 202 to start the tender opening on the tender 
opening day. The contract price selection means 202 directed 

25 to open, the tender, first, talces the hig-hest price within the 
acceptable range the candidate price, and supplied the decode 
parameter acquisition means 203 with this candidate price. 

The decode parameter acquisition means 203, acquires 
5 
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thilS decode parameter depending oix this candidate price, and 
delivers to the retrieve means 204. The retrieve means 204, 
decodes all coded bidding data received using the supplied 
decode parameter, in the decoding means 205, and retrieves if 
5 there is a bidding price same as the candidate price among the 
coded bidding data by the judgement means 206. If it is the 
case, the bidder sub-system that has sent that coded bidding 
data will be accepted. If there is no coded bidding data created 
taking this candidate price as bidding price, the retrieve 

10 means 204, outputs that the concerned candidate price is not 
the contract price to the contract price selection means 202. 

Upon the reception of a non candidate signal from the 
retrieve means 204, the contract price selection means 202, 
takes the next lower price than the current candidate price as 

15 a new candidate price, and delivers it to the decode parameter 
acduisition means 203. Then, the similar operation will be 
repeated until the judging means 206 decides a successful 
bidder, or the candidate price becomes lower than the tender 
possible range. If the candidate, price becomes lower than the 

20 tender possible range, it is judged that no bidding is accepted, 
and this result is output before terminating the processing. 

Now, as an example of this embodiment, the case where 
El Gamal code is used as coding function will be described. The 
El Gamal code being well known by those skilled in the art and 

25 irrelevant to the present irLvention, its detailed explanation 
will be omitted. 

First, the tender opening system creates a large prime p 
and a generator g. Besides, it decides a secret key x (v). a 
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public key y (v) and a constant M (v) for respective bidding 
price V, Here, the secret key x (v) and the public key y (v) 
present the following relation, M (v) may be an arbitrary value, 
and for example, v and its bash value can be linked as M (v) , or 
5 it well may be a constant independent of v. As code parameters. 
M (v) and y (v) are adopted and as decode parameter x (v). The 
code parameters are published, while the decode parameters 
are severely controlled in the tender opening sub-system. 

Tbe bidder sub-system 100, obtains code parameters, M 
10 (v) and y <v), for a bidding price v it desirea, and codes M (v) 
with the public key y (v) based on tbe El Gamal code. The El 
Gamal code, belonging to the code type called probabilistic 
encryption, is known to produce a different coded message 
even if the same M (v) is coded. The bidder sub-system 100, 
15 send this coding result to the tender opening system 200 as 
coded bidding data C (v). 

Tbe tender opening sub-system 200 obtains a decode 
parameter x (v') for a contract price candidate v' and decodes C 
(v) using this decode parameter as secret key. There, if v = v', 
20 obviously the decoding result will be M(v) = M (v'). On the 
contrary, if v 5t v', the decoding result will hardly be M(v'). 
Thus, without obtaining the bidding price, it can be judged if 
it is equal to the contract price candidate. 

If the contract price is decided to be v, all offered code 
25 bidding prices, and the decode parameter x (v> cor resp on din gr 
the bidding possible price equal to ox larger than v are 
publiahad by the announcem ea t means. Therefore, everyone 
can verify that there was no bidding price larger than v and 

7 
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who has bid the contract price, as they can try to decode all 
offered code bidding prices using this announced decode 
p arameter. 

On the other hand, bidding prices inferior to the 
5 contract price can be concealed, as the decode parameter x (v) 
corresponding to the bidding prices inferior to the contract 
price is not published. Further, problems in the case where a 
plurality of successful bidders exist as in the conventional 
method will not occur, because all bidding sub-systema will be 

10 identified, even when obviously a plurality of bidding sub- 
systems have offered the contract price. 

As a specific embodiment, now a case where RSA code is 
used for coding function will be described. The detailed 
description of RSA code will be omitted as it is well known by 

15 those skilled in the art and not relevant to the present 
invention. For RSA coding, code parameter y (v) is generated 
automatically form the bidding price v, without table lookup, 
and moreover-, the fixed value M (v) to be coded may not be 
fixed for all bidders. 

20 First, the tender opening system generates large primes 

p and q, and supposes n their product. The bidder sub-system 
generates as follows the code parameter M (v), y (v), for the 
bidding price v it wishes. That it to say, it g-enerates random 
numbers, and makes M (v) be the concatenation of v, and this 

25 random number, and the hash value where they are coupled. 
Next, supposing y (v), 1 is concatenated with the hash value of 
V, making it prime to <p-l)(q-l) each other. 

Then, M (v) is codified with the public key y (v) based on 
8 
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RSA code of the modulus n. lu this case, as diffexeut random 
numbers are generated for respective bidder, different coded 
messages are generated even if a same v ia coded. The bidder 
sub-system transmits this coding result to the tender opening 
system 200 as coded bidding data C (v). 

The tender opening system 200 calculates y (v') for a 
contract price candidate v', namely it hash value, and 
calculates x (v') that is the inverse element of y (v') in the 
modulus (p-l)(q-l), as decode parameter. Then, C (v) ia 
decoded in the modulus n taking this code parameter as secret 
key. 

Here, if v = v\ obviously, the decoding result M (v') will 
be a correct format by v' and a certain random number. On tlie 
other hand, if v ^ v', the decoding result will hardly be such 
format. Thus, without obtaining the bidding price it-self, it 
can be judged if it is equal to the contract price candidate. 

If the contract price is decided to be v. all offered code 
bidding prices-, and respective result of decoding by the decode 
parameter x (v) corresponding the tender possible price equal 
20 to or larger than v are published by the announcement means. 
Therefore, everyone can verify that there was no bidding price 
larger than v and who has bid the contract price, as they can 
confirm that the result coded by the code parameter y (v') 
correap ondine: to the contact price candidate is equal to offered 
26 respective code bidding^ prices, using this announced decode 
p arameter. 

On tKe otliejf hand, bidding prices inferior to tlie 
contract price can be concealed, as the decoding result 

9 
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corresponding to the bidding prices inferior to the contract 
price is not published. Further, problems in the case where a 
plurality of successful bidders exist as in the conventional 
method will not occur, because all bidding sub-ayatema will be 
B identified, even when obviously a plurality of bidding sub- 
systems have offered the contract price. 

Moreover, it is assured that code bidding prices to be 
input into the tender opening system excludes those outside 
the bidding period, by publishing code bidding prices received 

10 before the bidding deadline, and opening only those published 
ones. Aa it is irrelevant to the present invention, the detailed 
description thereof will be omitted. 

Additionally, it can be assured that the tender opening 
system will not decode illegally the code bidding price, by 

15 controlling or generating the decode parameter with a 
plurality of sub-systems, using distributed secret or group 
decryption technology or the like. As it is also irrelevant to the 
present invention, the detailed description thereof will be 
omitted. 

20 Beside, a digital signature of the code bidding price can 

be added, in order to prevent the bidder bidding in the nam© of 
the other, or denying later the transmitted code bidding price; 
however, as it is also irrelevant to the present invention, the 
detailed description thereof will be omitted. 

25 In this embodiment, to simplify, the caae where a 

bidding sub-system that has offered the highest price, among 
bid prices, will be decided aa tbe succesaful bidder Taaa been 

described in detail; however, similarly, it can easily be applied 

10 
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to the case wHerein the lowest price will be the contract price, 
or to the case wherein a plurality of bidding aub-system that 
have offered a bidding price close to the higheat price or the 
lowest price. 

6 It is to be understood that the present invention is not 

limited to the aforementioned respective embodiments, and 
obviously, the respective embodiments can be executed by 
conveniently modifying them, without departing from the 
technical concept of the present invention. 

10 As described hereinbefore, according to the present 

invention, it is possible to provide an electronic tender system, 
allowing to select the bidder who has offered the highest or the 
lowest price as successful bidder and moreover, to keep secret 
the bidding information of other bidding prices than that of 

15 the successful bidder, baaed on a basic composition wherein 
the bidder aub-syatem codes by means of a code parameter 
depending on the bidding price, and the tender opening system 
decoded by a decode parameter depending on the contract price 
candidate. 
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What is claimed is ; 

1. An electronic tender system, for accepting as contract 
price the highest or lowest price among bidding prices offered 
by a plurality of tenders, comprising ; 

a bidder sub-system including a code parameter 
acquisition means for taking as input a bidding price selected 
by the tender bidding subsystem within the tenderable range, 
and for acquiring a code parameter depending on the bidding 
price, a code processing means for using the code parameter 
obtained by said code parameter acquisition means, and a 
transmission means for sending a coded message coded by said 
coding means to a tender opening sub-syatem, and 

a tender opening sub-system including a reception 
means for accepting said coded bidding prices until the closing 
day, a selection means for selecting sequentially a contract 
price candidate from the highest or the lowest among 
acceptable bidding prices, a decode parameter acquisition 
means for acquiring a decode parameter corresponding to the 
contract price candidate selected by said selection means, and 
a retrieve means for retrieving if a same bidding price as the 
contract price candidate selected by said selection means 
exists among coded bidding prices accepted by said reception 
means usixis said decode parameter. 

2. The electronic tender system as claimed in claim 1, 
wherein the code processing means of said bidder sub-system, 

12 
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codes a fixed value uaingr tke code parameter obtained by said 
code parameter acquisition means, and the retrieve means of 
6 said tender opening sub-system includes a decoding means for 
sequentially decoding coded bidding prices received by said 
reception means according to the decode parameter acquired 
by said decode parameter acquisition means, and a judgement 
means fox judging that the coded bidding price is identical to 
10 the contact price candidate selected by said selection means in 
the case where the decoding: result becomes said fixed value. 

3. The electronic tender system as claimed in claim 1, 
wherein the code processing means of said bidder sub-system, 
includes a coding operation of the fixed price by a public key 
corresponding to said bidding price, and the decoding means of 

5 said tender opening system, includes a decoding operation 
with a secret key corresponding to said public key 
corresponding to the contact price candidate. 

4. The electronic tender system as claimed in claim 2, 
wherein the code processing means of said bidder sub-system, 
includes a coding operation of the fixed price by a public key 
corresponding to said bidding price, and the decoding means of 

5 said tender opening system, includes a decoding operation 
with a secret key corresponding to said public key 
coxresp oxidixigr to the contact price candidate. 

5. The electKonie tender system as claimed in claim 1, 
wherein said tender opening system includes an announcement 

13 
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means for announcing a portion of decode parameter acquired 
in the decode parameter acquisition means or decoding results 
5 obtained in the retrieve means for each contact price 
candidate. 

6. The electronic tender system as claimed in claim 2, 
wherein said tender opening system includes an announcement 
means for announcing a portion of decode parameter acquired 
in the decode parameter acquisition means or decoding results 

5 obtained in the retrieve means for each contact price 
candidate. 

7. The electronic tender system as claimed in claim 3, 
wherein said tender opening system includes an announcement 
means for announcing a portion of decode parameter acquired 
in the decode parameter acquisition means or decoding results 

5 obtained in the retrieve means for each contact price 
candidate. 

S. The electronic tender system as claimed in claim 4, 
wherein said tender opening system includes an announcement 
means for announcing a portion of decode parameter acquired 
in the decode parameter acquisition means or decoding: results 
5 obtained in the retrieve means for each contact price 
candidate. 
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Abstract of the Diaclosure: 

Tlie coding function section in tlie bidder sub-system 100 
is supplied with a code parameter depending on the bidding 
price, and the bidding price is coded depending on this code 
parameter. The tender opening system 200 decodes 
5 sequentially the decode parameter corresponding to the 
highest bidding price starting from the highest or the lowest 
one among bidding prices that can possibly be accepted, and 
the one that is successfully decoded is judged to be a bidding 
price corresponding to that parameter and accepted as 
10 contract price. The information of unaccepted bidding prices 
will be concealed, by not publishing the decode parameter 
concerning the bidding prices of the order inferior to the 
contract price. 
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31.298: Bernliard D 
Reg. No. 22.115: I 



10:77 smzm66i 



ESES29£5£LS-"io-id iiiBQ5:iD SB-BZ-Zl pSAiBSSii 



I lierehy Jrtelars that all statements made h 



1 of my own knowledee are true and that nil sutements made on information and belief a 
ments were made wirfi the kr 
iiler Section 1001 of Title 18 
r any patent issued thereoti. 



t-ull Name ot f\r&t or Sole Inventor 

KAZUE SAKO 


Signature ot Firs 


o^Sole Inventor 


27, 1999 


Residence Address U 
Tokyo, Japan 


Country of Citizenship 
Japan 


Post Office Address 

c/q NEC Corporation, 7-1, Shiba S-chome, Minato-ku, Tokyo, Japan 




Full Niame of Second Invcmor 


Signature at Sec:Qnd Inventor 


Date 


Restdeoee Address 


Country of Citizenship 


rEbai Office Address 




JPiilI Name of Thtrd Inventor 


Signature of Third Inventor 


Date 


sEEesidence Address 


Country of Citizsnship 


Raat Offitie Address 




Pull Nawe of fourth inventor 


Signature ot hourtii inventor 


Date 


Residence Address 


Country of Cmzeiwhip 


Post Office Address 1 






Hull Name of Pitth Inventor 


Signature ot Filttli Inventor 


bate 


ResicienQe Address 


Country of Citizenship 


Post OWicc Address 



